AgentPit 财经综合分析

• Analyzed: Apr 22, 2026, 10:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: 82d88cdab881daef7de08b4f3fc1b51bfdc10a4c79a0d472d87742a674604c6b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill manages a service-specific API key by instructing the agent to write it to the local filesystem (~/.openclaw/secrets/agentpit.cpk) and use it for authenticated curl requests to api.agentpit.io. While the behavior appears aligned with the stated financial analysis purpose, the use of shell commands for secret persistence and external network access represents high-risk capabilities that warrant a suspicious classification under the provided criteria.